Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4e75b6dfd02dae9ff30a520e616f6bd895de9001.roa
File: 4e75b6dfd02dae9ff30a520e616f6bd895de9001.roa (raw, json)
Hash identifier: HxExcfmdrmXwd5FBZsDXRy31AQJ8qpZj6xo0r8R82lY=
Subject key identifier: 1A:71:24:9F:90:D3:14:1A:E0:65:EB:22:4E:BF:64:0A:AC:3B:20:09
Certificate issuer: /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial: 0D653F
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4e75b6dfd02dae9ff30a520e616f6bd895de9001.roa
Signing time: Wed 24 Mar 2021 14:34:09 +0000
ROA not before: Wed 24 Mar 2021 14:34:07 +0000
ROA not after: Tue 24 Mar 2026 14:34:07 +0000
asID: 27901
IP address blocks: 131.221.164.0/22 maxlen: 24
138.99.224.0/22 maxlen: 24
167.250.52.0/22 maxlen: 24
207.248.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877887 (0xd653f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Validity
Not Before: Mar 24 14:34:07 2021 GMT
Not After : Mar 24 14:34:07 2026 GMT
Subject: CN=4e75b6dfd02dae9ff30a520e616f6bd895de9001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:2a:ec:4d:ad:28:c9:59:6c:b9:a3:75:1f:
b2:32:bc:7e:f5:1d:63:19:b8:06:ed:83:a4:a1:c1:
47:cf:b2:56:b9:a4:4e:aa:d3:2c:9b:31:52:cb:67:
56:9e:70:8e:48:58:b8:04:54:59:fc:35:9e:50:77:
02:b1:ed:42:f7:89:7b:25:77:3f:2e:b6:e1:be:58:
4f:9b:e9:d0:84:c4:0c:3f:e4:bd:2e:8e:4d:05:df:
ef:8e:ad:7a:2f:70:e9:30:dd:de:e2:d3:9f:5b:8a:
d1:0b:10:b5:4d:1b:fd:3c:bf:b7:9c:61:af:d9:48:
64:f0:8f:d6:00:7e:86:cd:60:88:c4:2b:5b:1c:ad:
20:47:2a:84:f6:d3:c4:f7:86:f0:80:88:c2:7c:5d:
44:12:01:8b:14:8a:3c:14:1c:78:74:ad:a2:4e:6f:
c9:c4:f9:ba:4c:26:0d:32:56:93:93:e4:e0:3e:04:
ec:06:6d:fe:46:40:97:a4:ba:50:52:0d:78:57:d9:
b8:90:a2:b5:ad:b0:cd:d5:43:9b:41:86:36:4d:89:
b3:6c:16:95:35:bd:6b:c1:a8:6c:b2:ab:0f:b9:ef:
a8:f5:4d:72:41:d1:19:45:e9:5d:92:93:b8:68:cd:
ff:db:e6:12:18:7f:c5:30:d6:91:28:18:5d:4f:3c:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:24:9F:90:D3:14:1A:E0:65:EB:22:4E:BF:64:0A:AC:3B:20:09
X509v3 Authority Key Identifier:
keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/4e75b6dfd02dae9ff30a520e616f6bd895de9001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.164.0/22
138.99.224.0/22
167.250.52.0/22
207.248.192.0/19
Signature Algorithm: sha256WithRSAEncryption
39:df:00:a9:85:27:7e:5e:3c:2d:dc:90:9d:a0:1d:b4:91:c3:
5a:72:3f:98:9a:92:7c:e8:5e:3d:c6:ea:6d:83:d3:3c:69:f5:
ec:37:a4:b0:25:14:3f:2e:28:58:e9:4b:9c:58:0c:24:90:09:
0b:b4:af:d3:d1:97:9d:ca:16:6e:3c:1d:4f:fb:20:be:23:b2:
fa:c5:2e:e7:0c:e9:9f:ff:49:47:22:36:6f:e7:83:52:77:e9:
84:dc:c5:3c:d4:66:0f:0c:15:97:e5:eb:aa:8c:ac:20:e4:62:
52:51:40:cb:89:59:1a:e1:32:22:90:2b:ee:bb:f1:68:b0:8f:
8f:72:a4:ca:ed:37:3c:79:98:a2:ef:f7:9f:66:29:86:09:53:
4e:5f:a8:64:35:94:aa:57:1b:76:b8:ac:f5:2e:45:04:89:97:
e5:42:c6:40:36:7f:ec:85:79:7b:6f:e1:10:79:34:db:28:a0:
4e:39:db:6f:49:aa:b5:e6:27:57:3e:13:1b:1c:9a:fd:5d:17:
24:ec:db:fe:e5:74:9f:f9:a3:d9:34:67:42:05:bd:b1:61:19:
92:3a:a2:85:c6:b4:19:fb:75:c1:f3:9c:52:81:2d:0e:a2:46:
a7:6a:eb:7e:55:b0:b0:04:b0:5e:00:2c:9d:4a:31:a7:18:69:
c0:b4:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org